5 ms·
could be somewhat related, last week I had a successful login for my Apple ID from a location I didn't recognise (somewhere in central asia). I noticed because
by dijit 3y ago
could be somewhat related, last week I had a successful login for my Apple ID from a location I didn't recognise (somewhere in central asia).
I noticed because I got a prompt on my phone, which requested I allow (or disallow) the access.
Since I'm pretty good about password hygiene and security, I of course changed my password immediately and force-signed out all my devices.
That being said: if someone has a password list and is using a bot to scan them all; Apple will of course lock-out sign-in attempts.
Not to say what they're doing is right, there's better ways to handle it. But if I were to apply very recent anecdotal data to this even then this is a meaningful conclusion I could draw.
- Ylpertnodi 3y ago>But if I were to apply very recent anecdotal data to this even then this is a meaningful conclusion I could draw. That being.....?
- dijit 3y agothat an account database is being brute force checked with various leaked passwords, and accounts that are being brute forced are being locked. Its a common problem that can cause denial of service to users, but failure to do anything can lead to account compromise.
- chrisjj 3y agoCan cause? Will cause, surely. > failure to do anything can lead to account compromise. Only on negligently managed accounts, right?
- chrisjj 3y ago> if someone has a password list and is using a bot to scan them all; Apple will of course lock-out sign-in attempts. Of course?? That would be insane. Password-guessing bots are all over the place. Apple should not allow them to cause lockouts.
- heyoni 3y agoI wonder if there’s a new leak out there with actually recent passwords we just haven’t heard of yet. If Apple got their hands on it and confirmed a significant number of passwords were active then taking drastic measures is their only option.
- chrisjj 3y agoI can't think of any source for suck a leak but Apple. > taking drastic measures is their only option. Less drastic would be to come clean and say the lockouts are by Apple themselves.
- heyoni 3y agoI've seen a few posts by users claiming to use randomly generated unique passwords. If that's true then it could be a leak from apple. On the other hand it could also be that it's not and the security response team is catching users not on that leaked list due to unrefined heuristics. On the third hand it is an apple leak, they've been given a sample list by whoever is ransoming them so they've enacted overly strict heuristics that apply to everyone.